Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
File:                     yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft (raw, json)
Hash identifier:          UMqUrUEIl2H0EqaPp+Eb9sjCNQ4uwxQFwEbvxY3WT2E=
Subject key identifier:   CC:3D:82:47:BF:40:3F:56:8F:0A:67:A8:6A:08:C3:F4:D7:50:38:5E
Authority key identifier: CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
Certificate issuer:       /CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Certificate serial:       01962DF3CCC9DE495F23BAF9676FFC21EA0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
Manifest number:          0EA9
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: vs_wrAmuGIug1GU_WsE0c2zCmpU.roa (hash: 9ijLmWfmtB/5rCC4VVeOb5sdlLKrU3qLnrDgERpleQY=)
                          2: yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl (hash: ZQS6mNRRXJTYceVU4NaJq0kQzRn0ONQT8A8G8XmouzA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cc:c9:de:49:5f:23:ba:f9:67:6f:fc:21:ea:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=cc3d8247bf403f568f0a67a86a08c3f4d750385e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:32:34:54:3d:7d:9c:ef:62:14:bb:94:e2:e8:
                    e0:43:16:33:90:84:3c:d1:6f:7a:7e:7f:3a:36:10:
                    1b:ac:02:d2:54:64:20:6c:b7:58:6c:e6:4c:88:0f:
                    37:1b:55:2b:5f:61:8e:5a:58:78:99:82:26:be:cc:
                    31:87:da:56:ef:65:be:53:7b:c1:7b:07:13:25:76:
                    c0:ea:fb:31:2a:6f:37:b3:2f:ce:9b:96:22:f6:db:
                    96:69:53:f8:ed:78:90:8f:f6:89:78:68:04:53:8b:
                    cd:ff:9a:64:8b:f7:70:ee:69:40:8d:78:f0:e3:53:
                    dc:cb:4f:7e:99:dc:21:be:ba:ba:7c:5d:5c:66:df:
                    4d:dc:5f:be:9c:07:77:22:87:1d:32:dc:35:ba:ab:
                    df:d6:ef:88:85:77:96:9f:c4:7b:97:2b:34:07:c3:
                    f5:14:0a:15:7e:0a:7e:c5:82:38:6f:73:c2:cf:6d:
                    0c:ac:de:24:d2:ed:7c:c2:25:7f:04:d6:ac:a6:25:
                    cd:7f:94:56:a0:a9:af:37:40:07:b0:ec:18:7c:76:
                    a1:31:5b:8a:64:d4:7d:97:0f:78:73:9d:98:dd:7e:
                    fc:55:ac:3d:37:d8:7f:dc:4d:ca:38:08:ca:a7:62:
                    ab:08:7a:0b:b3:ae:c6:53:0b:3a:f4:60:b3:ad:34:
                    62:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3D:82:47:BF:40:3F:56:8F:0A:67:A8:6A:08:C3:F4:D7:50:38:5E
            X509v3 Authority Key Identifier:
                keyid:CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:36:c0:75:95:48:6f:f4:d1:bf:43:02:d4:bb:bb:b0:65:30:
         06:7c:ab:b5:c4:cc:67:f5:b1:b7:a4:43:d8:e8:70:ff:c4:c5:
         b5:2f:a2:b0:f3:07:33:69:30:87:d4:95:4e:00:8d:9a:9d:92:
         f2:da:2a:cf:f1:be:d5:77:91:61:64:0c:44:93:b3:7a:08:8b:
         06:6b:10:8f:6d:dc:6c:24:ea:30:45:2e:51:4c:1d:19:cf:84:
         5f:8a:0d:4b:22:a4:a1:8f:fa:e7:1b:91:3a:21:69:5e:7a:e2:
         d2:17:a4:ae:90:c0:58:62:b1:92:5d:dd:2c:ef:6a:72:9e:4b:
         30:f5:01:f2:8c:8e:6e:d8:c6:06:fa:9b:a4:8e:4d:45:35:65:
         2d:a9:88:a5:d7:f6:00:7a:78:02:48:b2:3d:b2:a4:39:53:c9:
         5a:34:45:8b:d2:90:c1:da:40:1c:f8:6a:e7:c4:29:48:35:71:
         e6:e5:34:36:bc:4b:82:25:ee:c4:12:8d:bb:ac:88:1f:ca:29:
         d5:8f:59:53:9f:83:fc:a0:06:91:fe:73:14:1f:51:c1:cb:71:
         72:a7:0e:45:ab:6a:da:2e:58:88:aa:9a:33:0e:cb:9d:7f:b9:
         d2:d4:6c:d4:51:1e:a8:77:ab:68:fa:f5:2f:ae:b8:5d:0a:b3:
         56:fb:e6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----